Risk Management 2006: A Comprehensive Survey (Part I)

by Robert N. Charette

In 2002, Cutter Consortium conducted its first comprehensive survey of the state of risk management practice in the IT community. From all reports, the practice of risk management seems to have grown both generally and in formality over the past four years. The question this two-part series of Executive Reports by Robert N. Charette addresses is, has it, and if so, by how much? Here in Part I, we explore risk management under the umbrellas of experience, principles, areas in which it is needed, and the software processes surrounding the field. Part II will cover additional avenues of risk, including enterprise risk management -- the latest hyped segment. Overall, the 2006 survey finds that IT risk management practice has grown in maturity, if not in absolute numbers.